Anenge vhiki rega rega, masisitimu edu ekuona malware anoskena zviuru zvemapakeji matsva uye akagadziridzwa mumarejista everuzhinji akadai senpm nePyPI. Vhiki rino raive rakabatikana zvikuru.
Takasimbisa Mapakeji ane njodzi zana nemakumi matatu nemashanu, kunyanya munpm, pamwe nemamwe macases muPyPI, OpenVSX, Composer, uye VS Code extensions. Mamwe akaonekwa mumaclusters akarongeka, aine majekiseni akawanda akaburitswa pasi pemazita akafanana kana mumhuri dzemapakeji dzine hukama hwakasimba. Nyaya yakanakisa yaive sensivity package, iyo yakazadza npm neshanduro dzinopfuura makumi matanhatu dzakaburitswa muhuwandu hwe2.5.x. Mamwe mapoka anozivikanwa aisanganisira ai-sdk-helpers (8 shanduro dzakanangana nevagadziri veAI), @antoncallahan/aws-user-helper (Mavhezheni manomwe anotevedzera AWS utility), @apple-pay-trust uye @google-pay-trust mhuri (dzichitevedzera mamodule ekubhadhara), @frengki0707/google-cloud-clone (5 shanduro dzinonyengera Google Cloud), uye cms-storehub, cms-helpgit, uye cms-github (kutarisa CMS pipelines). Mapakeji mazhinji akatevedzera mamodule ekubhadhara nekubhadhara, enterprise uye mawebhusaiti emukati, ma analytics clients, UI foundations, developer utilities, component explorers, cloud- neGoogle-themed packages, uye mamwe ma module anowanzo vimba nemafambisirwo emazuva ano ekuvandudza.
Izvi zvakanga zvisiri zvinhu zvisina kujairika. Chakanyanya kuoneka vhiki rino kwaive kukura kwekuburitswa kwemashoko kakawanda mumhuri imwe chete yemapakeji, kushandiswazve kwemapatani emazita, uye nzira iyo mapakeji ane njodzi aionekwa seakavimbika mukati mekutumira software chaiyo. pipelines.
Mufananidzo uyu wevhiki nevhiki chikamu cheMalicious Code Digest yedu iri kuenderera mberi, kwatinosimbisa njodzi itsva uye kupa hungwaru hunoshanda kubatsira matimu eDevSecOps kuchengetedza kwavo pipelines usati wakuvara.
Ngatitsanangure zvatakawana vhiki rino uye kuti nei zvichikosha.
| Ecosystem | nhuri | zuva |
|---|---|---|
| npm | @cloudplatform-single-spa/administration:99.99.100 | Dai 30, 2026 |
| npm | @cloudplatform-single-spa/svp-s3-storage:99.99.100 | Dai 30, 2026 |
| npm | @maximvs1538/os-npm:99.0.0 | Dai 30, 2026 |
| npm | @nzira dzekupinda dziri nyore/dzekusvika:99.9.5 | Dai 30, 2026 |
| npm | @kupinda-nyore/kunyoresa-kunze-kwe-fop-navigator:99.9.5 | Dai 30, 2026 |
| npm | @kupinda-nyore/nzira:99.9.5 | Dai 30, 2026 |
| npm | @t-in-one/form_product_token:5.7.1 | Dai 30, 2026 |
| npm | @capibar.chat/ui-kit:99.5.7 | Dai 30, 2026 |
| vscode | xampp-maneja: 5.1.3 | Dai 30, 2026 |
| npm | @template yekutaura/mvumo:1.0.0 | Dai 31, 2026 |
| npm | json-ku-nyore-graphql-schema:1.0.0 | Jun 1, 2026 |
| npm | @gs-sarudza/application-yemutengi-wekuchengetedza:99.0.0 | Jun 1, 2026 |
| npm | nemo-reporter:1.8.2 | Jun 1, 2026 |
| npm | cms-github:4.2.4 | Jun 1, 2026 |
| npm | cms-helpgit:4.2.6 | Jun 1, 2026 |
| npm | cms-helpgit:4.2.8 | Jun 1, 2026 |
| npm | cms-storehub:1.3.4 | Jun 1, 2026 |
| npm | cms-storehub:1.3.5 | Jun 1, 2026 |
| npm | cms-storehub:1.3.6 | Jun 1, 2026 |
| pypi | simtooreal-cli:0.3.0 | Jun 1, 2026 |
| npm | nzira-yekutengesa-nzvimbo-yekutengesa-pamberi: 1.1.1 | Jun 1, 2026 |
| npm | nzira-yekutengesa-nzvimbo-yekutengesa-pamberi: 1.1.2 | Jun 1, 2026 |
| npm | conversa-sdk:2.0.2 | Jun 1, 2026 |
| npm | veltrix:9.0.0 | Jun 1, 2026 |
| npm | veltrix:9.0.1 | Jun 1, 2026 |
| npm | jingmeideshishi:1.0.4 | Jun 1, 2026 |
| npm | jingmeideshishi:1.0.5 | Jun 1, 2026 |
| npm | @tse-digital/core:99.0.0 | Jun 1, 2026 |
| npm | @telenor-se/core:99.0.0 | Jun 1, 2026 |
| npm | @ownit/core:99.0.0 | Jun 1, 2026 |
| npm | Magwaro evarwere: 75.0.0 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.69 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.68 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.82 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.80 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.81 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.83 | Jun 1, 2026 |
| npm | @antoncallahan/aws-user-helper:6767.67.3 | Jun 1, 2026 |
| npm | @emcd-vue/auth:6.4.9 | Jun 1, 2026 |
| npm | @emcd-vue/b2b-pay-form:5.7.4 | Jun 1, 2026 |
| npm | @ccrm/user-storage-api-axios:5.0.1 | Jun 2, 2026 |
| npm | kunzwa: 2.5.8 | Jun 2, 2026 |
| npm | kunzwa: 2.5.12 | Jun 2, 2026 |
| npm | kunzwa: 2.5.16 | Jun 2, 2026 |
| npm | kunzwa: 2.5.17 | Jun 2, 2026 |
| npm | kunzwa: 2.5.18 | Jun 2, 2026 |
| npm | kunzwa: 2.5.19 | Jun 2, 2026 |
| npm | kunzwa: 2.5.20 | Jun 2, 2026 |
| npm | kunzwa: 2.5.21 | Jun 2, 2026 |
| npm | kunzwa: 2.5.22 | Jun 2, 2026 |
| npm | kunzwa: 2.5.23 | Jun 2, 2026 |
| npm | kunzwa: 2.5.24 | Jun 2, 2026 |
| npm | kunzwa: 2.5.25 | Jun 2, 2026 |
| npm | kunzwa: 2.5.26 | Jun 2, 2026 |
| npm | kunzwa: 2.5.27 | Jun 2, 2026 |
| npm | kunzwa: 2.5.28 | Jun 2, 2026 |
| npm | kunzwa: 2.5.29 | Jun 2, 2026 |
| npm | kunzwa: 2.5.30 | Jun 2, 2026 |
| npm | kunzwa: 2.5.31 | Jun 2, 2026 |
| npm | kunzwa: 2.5.32 | Jun 2, 2026 |
| npm | kunzwa: 2.5.41 | Jun 2, 2026 |
| npm | kunzwa: 2.5.42 | Jun 2, 2026 |
| npm | kunzwa: 2.5.43 | Jun 2, 2026 |
| npm | kunzwa: 2.5.44 | Jun 2, 2026 |
| npm | kunzwa: 2.5.45 | Jun 2, 2026 |
| npm | kunzwa: 2.5.46 | Jun 2, 2026 |
| npm | vabatsiri ve meoo-ui:1.0.1 | Jun 2, 2026 |
| npm | @langgraphjs/toolkit:1.2.10 | Jun 2, 2026 |
| npm | eyevox:9.0.1 | Jun 2, 2026 |
| npm | kunzwa: 2.5.53 | Jun 3, 2026 |
| npm | kunzwa: 2.5.54 | Jun 3, 2026 |
| npm | kunzwa: 2.5.55 | Jun 3, 2026 |
| npm | kunzwa: 2.5.56 | Jun 3, 2026 |
| npm | kunzwa: 2.5.57 | Jun 3, 2026 |
| npm | kunzwa: 2.5.61 | Jun 3, 2026 |
| npm | @sentry-browser-sdk/profiling-node:1.0.1 | Jun 4, 2026 |
| npm | @sentry-browser-sdk/profiling-node:1.0.2 | Jun 4, 2026 |
| npm | @sentry-browser-sdk/profiling-node:1.0.5 | Jun 4, 2026 |
| npm | mushandira wekuunganidza mari:1.0.0 | Jun 4, 2026 |
| npm | kunzwa: 2.5.67 | Jun 4, 2026 |
| npm | kunzwa: 2.5.68 | Jun 4, 2026 |
| npm | vg-kudyidzana-muenzaniso:40.0.5 | Jun 4, 2026 |
| npm | internallib_v346:1.0.3 | Jun 4, 2026 |
| npm | internallib_v346:1.0.5 | Jun 4, 2026 |
| npm | internallib_v346:1.0.9 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:0.2.1 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:0.3.0 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:0.3.1 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:1.1.0 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:1.1.1 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:1.3.0 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:1.4.0 | Jun 4, 2026 |
| npm | vabatsiri veai-sdk:1.4.2 | Jun 4, 2026 |
| npm | @achuthvp/postinstall-poc:1.0.3 | Jun 4, 2026 |
| npm | kunzwa: 2.5.0 | Jun 5, 2026 |
| npm | kunzwa: 2.5.1 | Jun 5, 2026 |
| npm | kunzwa: 2.5.2 | Jun 5, 2026 |
| npm | kunzwa: 2.5.3 | Jun 5, 2026 |
| npm | kunzwa: 2.5.4 | Jun 5, 2026 |
| npm | kunzwa: 2.5.5 | Jun 5, 2026 |
| npm | kunzwa: 2.5.13 | Jun 5, 2026 |
| npm | kunzwa: 2.5.14 | Jun 5, 2026 |
| npm | kunzwa: 2.5.15 | Jun 5, 2026 |
| npm | kunzwa: 2.5.33 | Jun 5, 2026 |
| npm | kunzwa: 2.5.34 | Jun 5, 2026 |
| npm | kunzwa: 2.5.35 | Jun 5, 2026 |
| npm | kunzwa: 2.5.36 | Jun 5, 2026 |
| npm | kunzwa: 2.5.37 | Jun 5, 2026 |
| npm | kunzwa: 2.5.38 | Jun 5, 2026 |
| npm | kunzwa: 2.5.58 | Jun 5, 2026 |
| npm | kunzwa: 2.5.59 | Jun 5, 2026 |
| npm | kunzwa: 2.5.60 | Jun 5, 2026 |
| npm | kunzwa: 2.5.62 | Jun 5, 2026 |
| npm | kunzwa: 2.5.63 | Jun 5, 2026 |
| npm | kunzwa: 2.5.64 | Jun 5, 2026 |
| npm | kunzwa: 2.5.65 | Jun 5, 2026 |
| npm | kunzwa: 2.5.66 | Jun 5, 2026 |
| npm | kunzwa: 2.5.69 | Jun 5, 2026 |
Chengetedza Kuvimba Kwako Nevashandisi Vasina Ruzivo uye Kusava Nekodzero Dzekuchengetedza Makombiyuta
Usarega mapakeji ane njodzi achisvika kwauri pipelines. Kuonekwa Kwemarware EXygeni Pakutanga inoita kuti timu yako ionekwe panguva chaiyo nezvenjodzi dzinonyanya kukosha, ichibata zvinhu zvinokuvadza zvisati zvambobata software yako.
Sezvakaratidzwa nehurukuro yevhiki rino, huwandu uye kuomarara kwemapurogiramu ekurwisa mawebhusaiti hakusi kudzikira. Kuwanda kwemapurogiramu ekubatanidza, kutevedzera module yekubhadhara, uye mazita emapurogiramu anonzwika seari mukati mehurongwa ndedzimwe dzenzira dziri kushandiswa nevanorwisa kuti vasapfuure. standard dziviriro. Kuramba uri pamberi penjodzi idzi kunoda zvinopfuura kuongororwa nguva nenguva, zvinoda kutariswa nguva dzose murejista yega yega timu yako inovimba nayo.
Xygeni's Open Source Security Mhinduro inoskena uye inovhara mapakeji ane njodzi panguva yekuburitswa, kuburikidza ne npm, PyPI, uye zvichingodaro. Nekuisa pamberi pezvinhu zvinokanganisa zvinoisa njodzi huru panyika (uye kugadzirisa nzira yekugadzirisa yezvikwata zvako zveDevSecOps) Xygeni inokubatsira kuchengetedza kutumirwa kwesoftware kwakachengeteka uye kwakavimbika pasina kunonoka kukura.
